When the allow list targets a value, then the way to apply it follows one of three settings.

Where the rule lives 4

The test, or a helper of its file, calls the rule's code.

No test calls this code directly.

The test builds its class or calls another function of its module, which leads to the rule.

and 14 more

Read from the code graph graphify builds, at the places the domain documentation gives.